Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
File: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft (raw, json)
Hash identifier: fNm+q7ppIvnPbRy883OJdVnv9Pu9sfyMHc98fsTVaIs=
Subject key identifier: 0F:2B:77:06:CE:45:5E:FE:CC:9C:48:7B:E3:AD:8A:19:FA:22:10:0E
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 0196CD6163A67A3EBFAE98764688611DC601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
Manifest number: 1543
Signing time: Wed 14 May 2025 06:00:33 +0000
Manifest this update: Wed 14 May 2025 06:00:33 +0000
Manifest next update: Thu 15 May 2025 06:00:33 +0000
Files and hashes: 1: D7wvDXUsXUNReHXB-ElMhZdvj4w.roa (hash: YElp4tNhBybnsgMrPzJJrWGgoM31szDQK/CjgNi5G0I=)
2: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl (hash: 0P2jvAP8OCKkYseI0AV3iQWvhBdhsNopqO1kv1pWuEw=)
3: fV4CO55wgQW9hfh18y1_D2jQQS0.roa (hash: zkhm9MY22kTd2LgUoPIq1ls+LADDlKBeCuVAbz9l9VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:63:a6:7a:3e:bf:ae:98:76:46:88:61:1d:c6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: May 14 06:00:33 2025 GMT
Not After : May 15 06:00:33 2025 GMT
Subject: CN=0f2b7706ce455efecc9c487be3ad8a19fa22100e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:32:91:28:48:27:a0:fd:40:9d:cf:62:34:
d6:1d:9e:d1:aa:b4:e2:e5:03:91:5f:4d:58:17:36:
05:83:ee:df:00:ee:33:31:91:3b:26:94:d8:83:fa:
f8:71:83:1e:de:1a:c8:7a:76:fb:ec:9c:ff:fa:72:
fe:44:56:91:0b:1e:7b:72:32:d1:0d:0a:7a:e6:ee:
c2:fe:37:74:26:07:2d:ac:4d:ea:f0:e7:7e:63:b7:
4a:a2:90:29:ff:7d:21:42:ed:52:25:8a:11:af:1a:
69:e0:d7:ce:ed:e8:83:b0:86:fe:4d:63:99:32:ce:
c5:15:dd:fd:65:46:12:85:d5:ca:d0:95:36:c9:13:
86:8f:d6:79:b6:ee:ab:b2:da:ce:b1:6b:79:cb:87:
5a:ae:2f:03:73:89:de:99:3e:92:45:83:c9:44:d4:
10:8f:ef:f2:02:ba:10:81:23:7f:ff:96:34:32:32:
c4:19:c2:b6:de:12:fe:f3:a1:cd:d2:68:32:b6:8e:
44:36:13:41:4b:b5:68:d1:09:5e:e7:43:77:e0:f1:
14:16:eb:90:f7:e6:7e:d0:01:13:94:20:21:47:96:
56:04:a8:0b:da:c1:f2:e0:f7:f0:79:ff:73:72:a0:
61:3a:25:ab:55:02:4c:5d:12:b6:c2:62:64:6c:04:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2B:77:06:CE:45:5E:FE:CC:9C:48:7B:E3:AD:8A:19:FA:22:10:0E
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:45:1a:90:2d:f0:fe:67:d2:44:99:fe:93:88:97:98:71:2b:
ac:9e:c3:be:e5:62:52:8c:96:f8:5d:1c:c3:81:8c:f9:53:5d:
bb:c7:93:3e:ae:47:d9:b7:50:76:0e:1a:5a:a2:66:ca:cf:4c:
f0:0a:b1:89:12:4d:e0:87:d3:84:c9:e6:4a:1a:7c:97:50:3f:
23:34:f2:d7:cd:56:16:90:d5:9e:3c:25:6c:f2:3b:1f:dd:b9:
50:39:16:0b:77:01:bb:2f:e5:f7:2d:85:73:e7:2c:58:45:96:
c1:1c:7d:d2:3e:d2:d5:f1:6a:94:86:68:11:e3:ee:0e:77:c1:
38:cd:91:3e:30:e7:c1:da:ee:6c:eb:8f:27:00:99:01:8c:d5:
57:e1:7e:d0:f0:aa:5d:25:09:a7:b6:cd:dd:ad:fa:eb:39:b1:
c2:e3:44:1b:66:8f:81:75:d8:b0:6e:47:d1:4e:60:92:04:03:
71:b1:c5:76:d9:d0:0d:2b:31:f7:88:09:df:4f:1a:ec:63:b7:
f2:3d:26:3c:97:ea:e3:51:33:a1:6d:0d:fc:0b:78:28:70:77:
36:45:28:30:a8:e3:29:53:97:80:9a:de:29:88:89:dc:91:65:
f9:6e:91:f3:b2:b0:e3:34:c5:38:ba:b7:0e:62:b7:62:19:f4:
a3:ac:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:24:49 2025 by rpki-client